Senior Backend Engineer (TypeScript / Nest.js / AWS)

Vecten is an AI-native data and technology partner for private capital and healthcare, founded in 2010 and headquartered in Warsaw. The company works with leading PE firms, VC funds, and healthcare organizations, building proprietary data infrastructure and deploying AI solutions to drive AI-native transformation.

• 5+ years backend engineering with strong, recent TypeScript in production; experience with Nest.js or a comparable DI-based Node framework
• Experience building integration services or API gateways featuring webhooks, signature-based auth, retries, idempotency, circuit breakers, third-party API adapters
• Knowledge of PostgreSQL and relational data modelling, comfortable designing schemas and writing migrations
• Experience with multi-tenant systems or domains requiring strict data isolation with testing instincts
• Hands-on AWS experience (ECS/EKS or Lambda, SQS, S3, IAM, Secrets Manager or Vault); able to read and propose Terraform changes
• AI-native working style using tools like Claude Code and Codex
• Self-directed with ability to scope ambiguous requests, write design notes, and deliver without heavy oversight
• Fluent English and clear, proactive communication with technical and non-technical stakeholders

Nice to have:

• Insurance domain exposure including policy administration, claims, MGA/carrier structures
• Experience with batch/file-based integrations (SFTP ingestion, schema validation, quarantine patterns) or data mapping
• Regulated-data experience including PII/PHI handling, HIPAA or SOC 2 controls, audit logging
• Familiarity with observability tools such as Grafana and OpenTelemetry
• Prior consulting or client-facing delivery experience

• Design and build the gateway service on the client's Nest.js-based internal framework and AWS, proposing infrastructure changes as Terraform PRs for the DevOps team to apply
• Implement the webhook contract: HMAC authentication in application code with secrets in Vault, IP allowlisting, ISO-8601 date handling, policy-version-at-date-of-loss selection
• Build the tenant router and registry with composite resolution and well-defined failure behaviour
• Build the source adapter framework with per-source auth, timeouts, retries with backoff, and circuit breaking
• Build the batch path: SFTP landing zones per tenant, file validation and quarantine, idempotent loads into a PostgreSQL policy store with snapshot retention and freshness monitoring
• Define the canonical policy model and the shared canonical-to-target mapper; conduct reviews with the client's claims expert
• Deliver per-tenant observability via structured logs, metrics, Grafana dashboards, and alerts
• Produce an onboarding runbook to turn tenant onboarding into a configuration exercise
• Write isolation negative tests as a release gate, run failure-mode drills and end-to-end walkthroughs in the client's sandbox, support security review
• Collaborate directly with client engineers and domain experts asynchronously, with some availability in PT timezone required